Thursday, September 24, 2026 updated 26m ago · 3432k articles & posts · 1667k stories · 1572 sources

conv.security

The internet’s conversation, turned into timelines.

Security

RatHat: AI-powered Android malware steals bank credentials, resists deletion

New malware discovered by Zimperium uses AI and accessibility permissions to gain admin control, targeting financial apps across 162 infected apps.

RatHat: AI-powered Android malware steals bank credentials, resists deletion
13 pieces of coverage in the last 4 days; the story began Sep 17 began Sep 17now 15 pieces · 4 sources
why here

№109 (page 4) · newest development 3d ago · 15 pieces from 4 sources · ranked by recent attention

“Escalation in the Android landscape often relies on granting apps additional permissions that the OS locks away by default to keep the devices secure.”— Sav Wheeler, Malwarebytes research engineer · full quotes →
Zimperium Mobile security firmSav Wheeler Research engineer, Malwarebytes
4 sources
Security

POLITICO reports Russia plans to nearly double kamikaze drone production by 2029

Documents show Rosatom expanding carbon fiber capacity to manufacture 28,000 additional weaponized drones annually.

8 pieces of coverage since Sep 20 Sep 20now 8 pieces · 2 sources
why here

№110 (page 4) · newest development 3d ago · 8 pieces from 2 sources · ranked by recent attention

“operate in full compliance with applicable laws and regulations”— Rosatom · full quotes →
2 sources
Security 3d ago

Two arrested in Manchester counter-terrorism operation

Police arrested two men on suspicion of terrorism offences in Manchester city centre on Sunday afternoon.

6 pieces of coverage since Sep 20 Sep 20now 6 pieces · 2 sources · 10 comments
why here

№111 (page 4) · newest development 3d ago · 6 pieces from 2 sources · ranked by recent attention

“Two men have been arrested on suspicion of terrorism offences in Manchester city centre following a major police response in the Northern Quarter.”— Greater Manchester Police/MEN newsdesk · full quotes →
2 sources
Security

Police warn AI-equipped drones pose escalating threat to U.S. cities

A Police Executive Research Forum report cites unauthorized drone flights and AI advances as urgent public safety risks requiring federal…

2 pieces of coverage in the last 4 days; the story began Sep 19 began Sep 19now 4 pieces · 3 sources · 1 comments
why here

№112 (page 4) · newest development 3d ago · 4 pieces from 3 sources · ranked by recent attention

“Twenty-five years ago, our nation paid a terrible price for a failure of imagination. We cannot afford to make the same mistake again.”— Chuck Wexler, Executive director, Police Executive Research Forum · full quotes →
3 sources
Security

CrowdSec discloses source-code leak traced to TanStack npm supply-chain attack

A stolen GitHub token from a former employee's compromised laptop let an attacker copy 170 private CrowdSec repositories, the security firm…

6 pieces of coverage in the last 4 days; the story began Sep 19 began Sep 19now 9 pieces · 3 sources · 1 comments
why here

№113 (page 4) · newest development 3d ago · 9 pieces from 3 sources · ranked by recent attention

“Really wish every cybersecurity outfit (and every org for that matter) was as forthcoming and detailed (and competent) as Philippe and team.”— hrbrmstr · full quotes →
3 sources
Security

Scammers trick crypto users into draining their own wallets via fake Claude bot tutorials

A viral X thread describes YouTube tutorials that lure people into building an AI trading bot and unknowingly deploying malicious code…

2 pieces of coverage since Sep 20 Sep 20now 2 pieces · 2 sources · 362 comments
why here

№114 (page 4) · newest development 3d ago · 2 pieces from 2 sources · ranked by recent attention

“Scammers found a way to make people drain their own wallets without sending them a phishing link. They uploaded YouTube tutorials showing people how to build…”— @wyckoffweb, X user · X · full quotes →
2 sources
Security

Romanian crime rings drain U.S. welfare accounts through fraud scheme

Wall Street Journal investigation reveals organized crime networks exploiting benefits systems to steal from American welfare programs.

4 pieces of coverage since Sep 20 Sep 20now 4 pieces · 3 sources · 4 comments
why here

№115 (page 4) · newest development 3d ago · 4 pieces from 3 sources · ranked by recent attention

“Romanian Crime Rings Are Draining U.S. Welfare Accounts”— Wall Street Journal · Hacker News · full quotes →
3 sources
Security

Russia's FSB imposes curfew along border with NATO's Estonia

New restrictions ban night movement, river boating and hunting near the Estonia frontier, part of the border with Narva.

2 pieces of coverage since Sep 20 Sep 20now 2 pieces · 2 sources · 39 comments
why here

№116 (page 4) · newest development 3d ago · 2 pieces from 2 sources · ranked by recent attention

“NATO WakeUp there is game afoot and it's a team up!”— Powerfromspace1@mstdn.social · full quotes →
2 sources
Security

Researchers break out of OpenAI Codex sandbox, run host commands

Security researchers found two ways to escape OpenAI's Codex sandbox, including one that executes commands on a developer's machine from…

7 pieces of coverage in the last 4 days; the story began Sep 19 began Sep 19now 8 pieces · 3 sources · 9 comments
why here

№117 (page 4) · newest development 3d ago · 8 pieces from 3 sources · ranked by recent attention

“Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode.”— Ax Sharma, Bleeping Computer reporter · Mastodon · full quotes →
3 sources
Security

Cybersecurity experts: human attackers with AI remain bigger threat than rogue AI

Energy infrastructure remains dangerously vulnerable to cyberattack, but AI in criminal hands poses a greater near-term risk than…

6 pieces of coverage since Sep 20 Sep 20now 6 pieces · 5 sources · 1 comments
why here

№118 (page 4) · newest development 3d ago · 6 pieces from 5 sources · ranked by recent attention

“The true difference from AI is that it's letting adversaries move more quickly — but it's very challenging for those defending the infrastructure to match that…”— Sophie McDowall · full quotes →
5 sources

Claude Opus 5 used to breach OpenAI's internal systems in under 72 hours

Three researchers exploited a Discourse bug with Anthropic's AI to access OpenAI employee accounts and source code, earning a $6,500 bounty.

12 pieces of coverage in the last 4 days; the story began Sep 16 began Sep 16now 69 pieces · 7 sources · 34 comments
why here

№119 (page 4) · newest development 5d ago · 69 pieces from 7 sources · ranked by recent attention

“Three security researchers used Anthropic's Claude models to break into OpenAI's internal systems through its community forum in less than 72 hours.”— The Decoder, Tech news outlet · full quotes →
7 sources
Security

Analyst predicts large Saudi military response to Houthi attacks

King's College London researcher Nawaf Obaid tells Al Jazeera that Saudi Arabia is set to respond forcefully to attacks launched by Yemen's…

6 pieces of coverage since Sep 20 Sep 20now 6 pieces · 3 sources
why here

№120 (page 4) · newest development 3d ago · 6 pieces from 3 sources · ranked by recent attention

“There will be a very sizeable Saudi response”— Nawaf Obaid · full quotes →
3 sources
Security

Viral post alleges organized train robberies via burning cars on tracks near San Bernardino

A social media account claims criminal groups are blocking trains with burning vehicles to stage robberies in Southern California.

1 piece of coverage in the last 4 days; the story began Sep 20 began Sep 20now 2 pieces · 2 sources · 216 comments
why here

№121 (page 4) · newest development 3d ago · 2 pieces from 2 sources · ranked by recent attention

“BREAKING # SanBernardino / # California It appears criminal organizations are now conducting organized train robberies in Southern California, by burning…”— Bernard@friends.ravergram.club, Mastodon user resharing the claim · Mastodon · full quotes →
2 sources
Security

Telegraph: Putin's Geran-5 drones pose serious NATO threat

Analysis warns that a strike in Poland could test NATO's collective defense commitment.

1 piece of coverage in the last 4 days; the story began Sep 14 began Sep 14now 3 pieces · 3 sources · 5 comments
why here

№122 (page 4) · newest development 3d ago · 3 pieces from 3 sources · ranked by recent attention

“'A Geran-5 strike within Poland's borders would be a major test for the strength of the alliance'”— David Blair · full quotes →
3 sources

Congress probes vanished F-35 stealth parts rerouted through Hong Kong

A shipment of classified F-35 components bound for the US from Australia was diverted mid-Pacific to Hong Kong in June and has not been…

34 pieces of coverage in the last 4 days; the story began Sep 16 began Sep 16now 121 pieces · 6 sources · 573 comments
why here

№123 (page 4) · newest development 4d ago · 121 pieces from 6 sources · ranked by recent attention

“🚨🚨SCOOP: A shipment of F-35 fighter jet parts was rerouted to Hong Kong this summer — then vanished. Congress and DOD are investigating, amid the possibility…”— Mark Satter, Politico reporter · X · full quotes →
6 sources
Security 4d ago

State Department issues Mideast alert to US citizens

The State Department warned Americans across the Middle East region, citing security concerns.

0 pieces of coverage in the last 4 days; the story began Sep 19 began Sep 19now 2 pieces · 2 sources
why here

№124 (page 4) · newest development 4d ago · 2 pieces from 2 sources · ranked by recent attention

2 sources
Security

Claude AI finds seed-independent collisions in popular hash functions

Analysis using Claude Fable reveals cryptographic weaknesses in widely-used hashing algorithms including xxHash, HighwayHash, and others.

9 pieces of coverage since Sep 20 Sep 20now 9 pieces · 3 sources · 6 comments
why here

№125 (page 4) · newest development 3d ago · 9 pieces from 3 sources · ranked by recent attention

“I think it's fair to think of these findings more as "bugs" than "vulnerabilities". Ultimately a hash isn't supposed to have seed-indpendent collisions. That's…”— thomasahle · full quotes →
3 sources
Security

Guardian explains homoglyph attacks as scams increasingly use lookalike characters

Fraudsters exploit visually identical characters from different alphabets to create convincing fake URLs and emails.

7 pieces of coverage since Sep 20 Sep 20now 10 pieces · 4 sources
why here

№126 (page 4) · newest development 3d ago · 10 pieces from 4 sources · ranked by recent attention

“I don't think that this is a Cyrillic α, it looks like a Greek α.”— vayiam.bsky.social · full quotes →
4 sources
Security

Blogger says Google AI Studio fakes data deletion, VRP auto-bans him for reporting it

A Medium post alleges Google's AI Studio shows false deletion confirmations and that reporting the flaw triggered an instant ban from…

0 pieces of coverage since Sep 20 Sep 20now 3 pieces · 3 sources · 39 comments
why here

№127 (page 4) · newest development 4d ago · 3 pieces from 3 sources · ranked by recent attention

“Google AI Studio fakes data deletion. VRP auto-banned me in 60s for reporting it”— istokovicsgyorgy79, Medium author · Hacker News · full quotes →
3 sources
Security

Viral clip of a cockpit-ejecting 'ramming weapon' draws '一 これはひどい' reaction

An X post sharing footage of a weapon whose pilot compartment detaches just before impact spreads to Japanese social media.

1 piece of coverage since Sep 20 Sep 20now 2 pieces · 2 sources · 108 comments
why here

№128 (page 4) · newest development 3d ago · 2 pieces from 2 sources · ranked by recent attention

“体当たり直前に操縦区画が離脱する決戦兵器。”— vanilla_vodka@fedibird.com · full quotes →
2 sources
Security

MeidasTouch publishes images of Iranian strike damage at US base in Kuwait

Exclusive photos allege a leveled airfield and a direct drone hit on a bunker after an Iranian attack on a US installation in Kuwait.

2 pieces of coverage in the last 4 days; the story began Sep 18 began Sep 18now 5 pieces · 3 sources · 33 comments
why here

№129 (page 4) · newest development 3d ago · 5 pieces from 3 sources · ranked by recent attention

“Pete Hegseth is hiding the truth about the war from voters.”— jaykuo@universeodon.com · full quotes →
3 sources
Security

Polymarket bug reportedly let identity thieves access existing user accounts

A flaw in Polymarket's platform reportedly allowed attackers to break into existing accounts using stolen identity information.

3 pieces of coverage in the last 4 days; the story began Sep 19 began Sep 19now 5 pieces · 3 sources
why here

№130 (page 4) · newest development 3d ago · 5 pieces from 3 sources · ranked by recent attention

3 sources
Security

TTP-linked bombing hits mosque in northwestern Pakistan during Friday prayers

An armed group tied to the Pakistani Taliban claims a mosque attack that killed and injured dozens, reviving debate over Islamabad's…

0 pieces of coverage since Sep 20 Sep 20now 4 pieces · 3 sources
why here

№131 (page 4) · newest development 4d ago · 4 pieces from 3 sources · ranked by recent attention

“Another Friday prayer, another attack on a mosque, this time in northwestern Pakistan.”— Al Jazeera English · full quotes →
3 sources

Researchers use Anthropic's Claude to hack into OpenAI's internal systems

Hacktron says it took under 72 hours to breach OpenAI employee accounts and its GitHub 'Monorepo' with Claude's help, days after OpenAI…

0 pieces of coverage in the last 4 days; the story began Sep 11 began Sep 11now 341 pieces · 8 sources · 934 comments
why here

№132 (page 4) · newest development 5d ago · 341 pieces from 8 sources · ranked by recent attention

“We immediately reported the initial vulnerability to OpenAI and Discourse and worked with them to coor…”— Hacktron researchers · full quotes →
8 sources
Security

Researcher factors RSA-896 cryptographic challenge with Claude AI

A researcher used Anthropic's Claude to factor a 896-bit RSA number, disclosing the prime factors publicly.

12 pieces of coverage since Sep 20 Sep 20now 25 pieces · 4 sources · 97 comments
why here

№133 (page 4) · newest development 4d ago · 25 pieces from 4 sources · ranked by recent attention

“RSA-896 is a RSA challenge number I factored with Claude on September 19, 2026.”— madars, Researcher · Hacker News · full quotes →
4 sources
Security

Ledger Donjon breaks RP2350 debug lock using laser fault injection

Security researchers used a focused laser to flip bits and unlock debug access on Raspberry Pi's RP2350 microcontroller, solving the chip's…

1 piece of coverage since Sep 20 Sep 20now 5 pieces · 3 sources
why here

№134 (page 4) · newest development 4d ago · 5 pieces from 3 sources · ranked by recent attention

“went full Bond Villain and strapped everyone's favourite fruit-flavoured microcontroller to a table with a slowly-approaching laser beam”— Hackaday, Publication · Hacker News · full quotes →
3 sources
Security

Skirmishes erupt between protesters and ICE agents outside Broadview facility

Clashes outside the Broadview ICE facility spark a wave of anger online over masked federal agents and calls to abolish ICE.

33 pieces of coverage in the last 4 days; the story began Sep 19 began Sep 19now 71 pieces · 1 source · 100 comments
why here

№135 (page 4) · newest development 4d ago · 71 pieces from 1 sources · ranked by recent attention

“it’s because our media purposely doesn’t cover it, so the only way you can see it is when someone brave enough to put on their social media shows it!”— starrceline.bsky.social · full quotes →
1 source
Security

NORAD F-16 intercepts aircraft violating Camp David airspace with Trump present

A general aviation aircraft was intercepted over restricted airspace near the presidential retreat Saturday morning; the pilot was safely…

2 pieces of coverage in the last 4 days; the story began Sep 19 began Sep 19now 9 pieces · 3 sources
why here

№136 (page 4) · newest development 3d ago · 9 pieces from 3 sources · ranked by recent attention

“Pilots! @NORADCommand fighter aircraft intercepted an aircraft violating restricted airspace over Thurmont, MD, resulting in flares being deployed.”— First Air Force / NORAD, Military command · X (posted by First Air Force) · full quotes →
3 sources
Security

UK military sites face near-daily drone incidents amid Russia hybrid threat warnings

FOI data show 340 drone incidents at UK defence sites in a year, prompting accusations the government is 'asleep' to a growing hybrid…

1 piece of coverage in the last 4 days; the story began Sep 18 began Sep 18now 17 pieces · 4 sources
why here

№137 (page 4) · newest development 4d ago · 17 pieces from 4 sources · ranked by recent attention

“Escalation management is part of our mindset, of our attitude.”— Admiral Giuseppe Cavo Dragone, NATO Military Committee Chair · Mastodon · full quotes →
4 sources
Security

US confirms it has deployed weapons in orbit, sparking arms-race warnings

Air Force Secretary Troy Meink's admission of "on-orbit" space-control weapons draws formal protests from China and Russia and warnings of…

7 pieces of coverage in the last 4 days; the story began Sep 14 began Sep 14now 523 pieces · 8 sources · 789 comments
why here

№138 (page 4) · newest development 4d ago · 523 pieces from 8 sources · ranked by recent attention

“left experts scratching their heads at exactly what Donald Trump has in his cosmic arsenal”— The Guardian · full quotes →
8 sources
Security

Bellingcat reveals Christy Kinahan's UAE visa cancelled

Irish crime boss Kinahan's residence permit was cancelled in August, weeks after his son's extradition to Ireland.

1 piece of coverage in the last 4 days; the story began Sep 19 began Sep 19now 4 pieces · 2 sources
why here

№139 (page 4) · newest development 4d ago · 4 pieces from 2 sources · ranked by recent attention

“Christy Kinahan, the Irish founder of the Kinahan Organised Crime Group who is being pursued by authorities around the world from his bolthole in the United…”— Bellingcat · full quotes →
2 sources
Security

US Air Force B-1B bomber departs RAF Fairford loaded with munitions

A B-1B Lancer strategic bomber left the UK air base carrying a full weapons load, drawing attention on social media.

0 pieces of coverage in the last 4 days; the story began Sep 19 began Sep 19now 2 pieces · 2 sources · 4 comments
why here

№140 (page 4) · newest development 4d ago · 2 pieces from 2 sources · ranked by recent attention

“In the early hours of 20 September, a U.S. Air Force B-1B Lancer strategic bomber, carrying a full load of munitions, took off from RAF Fairford in the United…”— @GhorbaniiNiyak · full quotes →
2 sources
Security 4d ago

Pentagon pursues creation of dedicated 'AI Force' military branch

Following Space Force model, U.S. military explores establishing separate command structure for artificial intelligence operations.

2 pieces of coverage in the last 4 days; the story began Sep 19 began Sep 19now 3 pieces · 3 sources
why here

№141 (page 4) · newest development 4d ago · 3 pieces from 3 sources · ranked by recent attention

3 sources
Security

Open-weight AI models trigger year-long security crisis

Cheap, abliterated LLMs like GLM 5.3-flash can find vulnerabilities faster than humans can patch them.

28 pieces of coverage in the last 4 days; the story began Sep 19 began Sep 19now 58 pieces · 1 source · 58 comments
why here

№142 (page 4) · newest development 4d ago · 58 pieces from 1 sources · ranked by recent attention

“I think it's even worse than that, it's less "we don't even have a year" and more "we have negative six months". Black hats are absolutely going ham in the…”— wareya · full quotes →
1 source
Security

NordVPN report: AI voice cloning fraud up 7.4x in two years, tools sold for $500

A new NordVPN report finds AI voice cloning scams surging as cloning software becomes cheap and widely advertised.

0 pieces of coverage in the last 4 days; the story began Sep 19 began Sep 19now 7 pieces · 2 sources
why here

№143 (page 4) · newest development 4d ago · 7 pieces from 2 sources · ranked by recent attention

2 sources
Security

Al-Qaida-linked JNIM claims deadly Mali army camp attack, releases soldier captive videos

The militant group claims to have killed over 100 Malian soldiers and captured dozens in a Sept. 10 assault on a central Mali base.

1 piece of coverage in the last 4 days; the story began Sep 19 began Sep 19now 3 pieces · 2 sources
why here

№144 (page 4) · newest development 4d ago · 3 pieces from 2 sources · ranked by recent attention

“This is very concerning to the Malian army as well as to their Russian partners because of the significance of the attacks…if they don't want to communicate…”— Rida Lyammouri · full quotes →
2 sources